QubesOS has issued Qubes Security Bulletin 118 to address a critical vulnerability that allows arbitrary code execution in the privileged Dom0 environment. The security flaw can be exploited through an error reporting backchannel in the qvm-copy-to-vm utility, prompting the release of immediate cryptographic updates for all users.